Arbitrary Code Execution Vulnerability in Microsoft Windows Task Scheduler

Reported July 13, 2004, byMicrosoft

VERSIONS AFFECTED

DESCRIPTION
A vulnerability in Windows XP, Windows 2000, and Windows NT 4.0 could allow theremote execution of arbitrary code on the vulnerable system. This vulnerabilityis a result of an unchecked buffer in the Task Scheduler.

VENDOR RESPONSE
Microsoft has releasedbulletin MS04-022, "Vulnerability in Task Scheduler Could AllowCode Execution (841873)," to address this vulnerability and recommendsthat affected users apply the appropriate patch listed in the bulletin.

CREDIT
Discovered by Brett Moore, Dustin Schneider,and Peter Winter-Smith.